$ rpki-client -vvf repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft File: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft (raw, json) Hash identifier: 5Ds2vV6/W4t/yyCHRxTgPE3ifkRgu9/zdwbS5eke/ss= Subject key identifier: 24:CA:26:E2:24:2C:8E:45:AE:91:1B:0A:DC:BD:8C:47:96:29:B5:59 Authority key identifier: 28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C Certificate issuer: /CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Certificate serial: 0C37DD570968605DD92AFFD6B6D3C3A3C6D93AD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft Manifest number: 039C Signing time: Mon 03 Nov 2025 23:21:10 +0000 Manifest this update: Mon 03 Nov 2025 23:16:10 +0000 Manifest next update: Fri 07 Nov 2025 01:21:10 +0000 Files and hashes: 1: 3130332e3136372e342e302f32332d3234203d3e203137393935.roa (hash: nkgXHJ5vIn9/vQDJ4p+3bqA8uvcYzydpLoR2QR3gRRw=) 2: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl (hash: I/yVFnhyEInGy3DpBPX3eaTvoP2wMFtFIpQ+jlRDwbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:37:dd:57:09:68:60:5d:d9:2a:ff:d6:b6:d3:c3:a3:c6:d9:3a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Validity Not Before: Nov 3 23:16:10 2025 GMT Not After : Nov 7 01:21:10 2025 GMT Subject: CN=24CA26E2242C8E45AE911B0ADCBD8C479629B559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ed:2e:32:02:36:30:18:10:aa:29:02:42:31: d9:17:b3:30:65:3b:dd:50:1d:ed:2f:d5:8b:25:ca: 83:c1:59:46:37:ec:1f:1b:a6:32:3a:8b:e7:2c:43: 2f:9f:d6:e9:4b:ed:c0:37:ce:c0:62:43:e1:d1:de: aa:a7:d5:49:78:f7:46:d1:32:14:96:a5:64:b8:33: c9:9d:30:b9:12:35:e0:42:35:77:14:02:9e:f6:0f: 48:82:0a:a0:77:48:4e:6c:e4:60:67:c5:43:23:5d: 58:dd:46:a5:36:b3:3f:26:82:d2:91:21:fa:44:f4: 5f:72:0a:77:b3:99:c3:0b:7f:d0:ae:a3:54:fe:17: 09:64:54:c4:5d:db:b3:d8:83:b3:51:48:e9:8f:49: 53:62:d2:59:a5:f7:dc:a4:35:9f:28:56:fc:8a:51: 18:36:95:99:41:8c:d3:7e:4d:1b:2b:a4:75:cb:05: f0:35:a6:4e:81:f7:6b:fe:d1:16:7b:5d:5b:7d:a8: 9b:5c:70:bf:2b:ff:15:d3:47:db:a3:97:ae:a5:b5: 09:e7:ef:64:80:57:11:9f:45:c8:f3:65:da:eb:4b: 76:b3:2e:9d:9b:96:c6:21:bc:3b:4e:c6:cc:3f:3f: e4:20:a0:7c:8e:76:c6:ec:d0:15:16:07:54:43:2d: bf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CA:26:E2:24:2C:8E:45:AE:91:1B:0A:DC:BD:8C:47:96:29:B5:59 X509v3 Authority Key Identifier: keyid:28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:69:9d:18:e0:3b:6a:9f:c9:01:09:a2:66:20:f6:e5:62:a9: 75:f2:66:9b:47:65:30:8c:d5:e2:45:77:cc:2c:2d:62:d5:9b: 27:a4:29:2a:fb:a0:8a:f6:cd:32:fb:8c:05:37:ad:1a:a6:c1: 8a:af:85:39:f6:db:71:7f:5e:ec:cc:63:30:a2:1e:cd:00:39: fe:2f:bc:0e:cb:2e:1e:37:cc:86:49:27:a4:90:8f:dd:d9:f3: 20:91:35:74:c6:d5:e5:04:83:73:19:b5:fa:51:b8:b8:75:ad: 31:8e:6e:29:2f:9f:6c:30:70:c4:14:93:6e:23:3e:07:9f:dd: bc:19:3c:41:0f:a2:95:7e:3f:58:38:7d:ac:0c:cd:6e:01:de: 06:04:48:f4:59:53:a3:3d:7e:3a:1f:4f:12:7b:48:4c:49:ae: 43:92:07:80:ff:f7:b3:1e:56:f9:a4:41:9f:5e:1c:37:ac:44: 29:c2:1a:f2:1e:4d:8b:46:32:2e:42:c3:55:de:67:73:31:d2: bf:06:31:1b:c7:68:2e:4c:dd:24:66:e2:8d:8d:8b:87:94:c7: d7:38:ae:fc:24:1a:55:e8:32:51:3b:38:33:b2:ae:a5:68:4d: d3:13:0d:90:cd:a5:78:14:63:8b:cc:ae:87:c5:d0:5d:5d:2e: 03:fb:42:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDfdVwloYF3ZKv/WttPDo8bZOtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEEx MjkwM0Q3QzAeFw0yNTExMDMyMzE2MTBaFw0yNTExMDcwMTIxMTBaMDMxMTAvBgNV BAMTKDI0Q0EyNkUyMjQyQzhFNDVBRTkxMUIwQURDQkQ4QzQ3OTYyOUI1NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc7S4yAjYwGBCqKQJCMdkXszBl O91QHe0v1YslyoPBWUY37B8bpjI6i+csQy+f1ulL7cA3zsBiQ+HR3qqn1Ul490bR MhSWpWS4M8mdMLkSNeBCNXcUAp72D0iCCqB3SE5s5GBnxUMjXVjdRqU2sz8mgtKR IfpE9F9yCnezmcMLf9Cuo1T+FwlkVMRd27PYg7NRSOmPSVNi0lml99ykNZ8oVvyK URg2lZlBjNN+TRsrpHXLBfA1pk6B92v+0RZ7XVt9qJtccL8r/xXTR9ujl66ltQnn 72SAVxGfRcjzZdrrS3azLp2blsYhvDtOxsw/P+QgoHyOdsbs0BUWB1RDLb9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJMom4iQsjkWukRsK3L2MR5YptVkwHwYDVR0j BBgwFoAUKJB6az1PsYfzoVv3RX2UihKQPXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGMxNGI5OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8yODkwN0E2QjNE NEZCMTg3RjNBMTVCRjc0NTdEOTQ4QTEyOTAzRDdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEExMjkw M0Q3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBjMTRiOTktNGVlNy00MjJhLWIw NjQtZGNhMzIzNmQ2NzU2LzAvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0 OEExMjkwM0Q3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZpnRjgO2qfyQEJomYg9uViqXXyZptHZTCM 1eJFd8wsLWLVmyekKSr7oIr2zTL7jAU3rRqmwYqvhTn223F/XuzMYzCiHs0AOf4v vA7LLh43zIZJJ6SQj93Z8yCRNXTG1eUEg3MZtfpRuLh1rTGObikvn2wwcMQUk24j Pgef3bwZPEEPopV+P1g4fawMzW4B3gYESPRZU6M9fjofTxJ7SExJrkOSB4D/97Me VvmkQZ9eHDesRCnCGvIeTYtGMi5Cw1XeZ3Mx0r8GMRvHaC5M3SRm4o2Ni4eUx9c4 rvwkGlXoMlE7ODOyrqVoTdMTDZDNpXgUY4vMrofF0F1dLgP7Qjc= -----END CERTIFICATE-----Generated at Tue Nov 4 12:33:11 2025 by rpki-client